valinet / ExplorerPatcher

This project aims to enhance the working environment on Windows
GNU General Public License v2.0
24.23k stars 1.04k forks source link

Is Explorer Patcher infected? #3459

Closed mustafatoktas closed 2 months ago

mustafatoktas commented 3 months ago

I don't think it's likely, but could Explorer patcher have a virus?

In windows 11 home 23H2 22631.3672 version, windows defender caught the trojan virus as seen in the picture. The affected item appears to be ep_setup.exe.

Does anyone have any information about this?

EP version: 22621.3810.66.1

Ekran görüntüsü 2024-07-09 104644

Amrsatrio commented 2 months ago

No, it is a false positive.

Amrsatrio commented 2 months ago

https://www.reddit.com/r/StableDiffusion/comments/11vtmyn/windows_defender_threat_defender/

VarunAgw commented 2 months ago

Same with Avast. Never happened in the past but only today when trying to update

Amrsatrio commented 2 months ago

In this update I am introducing a new DLL which is 2.4 MB big, which is the reimplemented taskbar. That might be the reason, it takes a bit of time till it gets well known and reputable.

pyrates999 commented 2 months ago

And all builds of EP are done by github servers. So you can check the source code yourself to verify :)

Amrsatrio commented 2 months ago

@pyrates999 Not anymore when the taskbar is included. I cannot open source that without getting a DMCA or some sort, although I really want to.

VarunAgw commented 2 months ago

@pyrates999 It's not about trust.

Getting anti-virus warning is really annoying for everyone. No one likes a software which gets false positive.

mustafatoktas commented 2 months ago

You are thinking wrong. There is really a great effort behind the EP application. I don't care if it's a false positive situation. This app gives me everything I want.

pyrates999 commented 2 months ago

Well I hope you open source it because the other alternative is for someone to buy the software StartAllBack. I don't see how you can get a DMCA claim though since it would be your own code.

Amrsatrio commented 2 months ago

No, the logic is not. It is Microsoft's.

pyrates999 commented 2 months ago

Understood.

Amrsatrio commented 2 months ago

66.1 ep_setup.exe is no longer detected as Casdet. Closing this issue.

mustafatoktas commented 2 months ago

I am using EP's 66.1 ep_setup.exe version. Windows Defender detected Casdet as a virus in this version.

Ekran görüntüsü 2024-07-10 153435

Amrsatrio commented 2 months ago

Update your definitions, I updated mine and downloaded 66.1 with no problems.

mustafatoktas commented 2 months ago

Thank you ✅